Token Command Authentication via CAMD and ACAS
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional protection schemes for confidential information in computer systems are inadequate as they only secure predefined entry points, failing to account for vulnerabilities that nefarious individuals can exploit to access sensitive data through knowledge of hardware and software systems, network connections, etc.
Innovation Solution
A token system that authenticates connected devices and provides encryption keys, using a processor and secure storage to manage authentication message digests and secrets, ensuring only authorized access and secure communication by generating and verifying command authentication message digests with an Administrative Command Authentication Secret.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional protection schemes are used to secure predefined entry points, then access control at entry points is improved, but vulnerability to nefarious individuals exploiting system knowledge remains
Solution Approach 1:
The patent segments the security protection into multiple layers: entry point authentication, command authentication through CAMD generation, and data encryption. This segmentation allows each layer to address specific security concerns, with the CAMD layer specifically targeting the vulnerability to exploitation by requiring dynamic authentication for each command.
Solution Approach 2:
The patent applies preliminary action by pre-establishing authentication mechanisms and encryption keys before any data transmission or command execution occurs. The ACAS is stored in advance, and the CAMD generation process is prepared beforehand, ensuring that authentication and encryption are in place before any potential exploitation can occur.
2Reliability
If encryption is used to protect confidential information, then data protection is improved, but complexity of authentication and key management increases
Solution Approach 1:
The ACAS serves multiple functions: it is used to generate CAMD for command authentication, to encrypt data, and to verify the identity of communicating parties. This multi-functionality reduces the need for separate authentication and encryption mechanisms, thereby managing complexity while maintaining strong data protection.
Solution Approach 2:
The CAMD acts as an intermediary mechanism between the command sender and the token. Instead of directly managing complex key exchanges and authentication protocols, the system uses CAMD generation and verification as a simplified intermediary step that encapsulates the underlying cryptographic complexity.
3Reliability
If dynamic authentication mechanisms are implemented, then security against unauthorized access is improved, but processing time and computational overhead increases
Solution Approach 1:
The patent implements partial authentication action by requiring authentication only for specific commands and operations rather than for all system access. The CAMD is generated only when needed for command authentication, and the ACAS is used selectively for data encryption, reducing the total computational overhead while maintaining strong security where required.
Data Source
AI summary
In general, the invention relates to a method for performing a command on a token. The method includes receiving a first command authentication message digest (CAMD), a command, and scrambled data from a sender, and making a first determination that the sender is allowed to send commands to the token. The method further includes, based on the first determination, generating a second CAMD on the token using the command, the scrambled data, and an Administrative Command Authentication Secret (ACAS), making a second determination that the first CAMD and the second CAMD match, and based on the second determination, performing the command by the token.